← Back to context Comment by saagarjha 3 hours ago macOS attributes shell commands to their parent app bundle. 9 comments saagarjha Reply 0c3ca83 1 hour ago That seems like a massive hole in the model that would make it very hard to lock down multi-process/privsep programs like sshd. saagarjha 1 hour ago Sandboxing something like that is challenging, yes. But probably not for this reason you can always disclaim responsibility for your process. 0c3ca83 1 hour ago It really isn't; the program just needs to be able to declare what it expects it should be able to do, and what it expects its children should be able to do. The latter doesn't need to be a subset of the former. 5 replies → joshspankit 3 hours ago Indeed. It’s very inconvenient to ‘cd` and have to do the whole permission dance to read a file
0c3ca83 1 hour ago That seems like a massive hole in the model that would make it very hard to lock down multi-process/privsep programs like sshd. saagarjha 1 hour ago Sandboxing something like that is challenging, yes. But probably not for this reason you can always disclaim responsibility for your process. 0c3ca83 1 hour ago It really isn't; the program just needs to be able to declare what it expects it should be able to do, and what it expects its children should be able to do. The latter doesn't need to be a subset of the former. 5 replies →
saagarjha 1 hour ago Sandboxing something like that is challenging, yes. But probably not for this reason you can always disclaim responsibility for your process. 0c3ca83 1 hour ago It really isn't; the program just needs to be able to declare what it expects it should be able to do, and what it expects its children should be able to do. The latter doesn't need to be a subset of the former. 5 replies →
0c3ca83 1 hour ago It really isn't; the program just needs to be able to declare what it expects it should be able to do, and what it expects its children should be able to do. The latter doesn't need to be a subset of the former. 5 replies →
joshspankit 3 hours ago Indeed. It’s very inconvenient to ‘cd` and have to do the whole permission dance to read a file
That seems like a massive hole in the model that would make it very hard to lock down multi-process/privsep programs like sshd.
Sandboxing something like that is challenging, yes. But probably not for this reason you can always disclaim responsibility for your process.
It really isn't; the program just needs to be able to declare what it expects it should be able to do, and what it expects its children should be able to do. The latter doesn't need to be a subset of the former.
5 replies →
Indeed. It’s very inconvenient to ‘cd` and have to do the whole permission dance to read a file